Quote:
Originally Posted by woj
I have an idea too, but it's kinda fucked that you can change anyone's password by only answering the "security question"....
|
No, that's not a problem. If someone can guess you security question then they can guess your password. The security question is actually more complex than the password if it is used correctly.